Hi!
I noticed winlogbeat events don't have an event.ingested field like events of other beats. I guess the field is created by an ingest pipeline. But running ".\winlogbeat.exe setup" creates no pipeline.
Is there no default pipeline for winlogbeat?
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.